Senior Technical Compliance Analyst

JobgetherCloud security compliance

Based in the United StatesFull-TimeSenior

Salary$95,000–$187,000 USD, depending on skills, experience, qualifications, and work location.

Apply NowOpens the employer's application page

Job Details

Experience: At least 7 years of experience in Governance, Risk, and Compliance (GRC), Information Security, or IT Audit
Required Skills: AWSGCPMicrosoft AzureJiraConfluence

Have a bachelor's degree in a technical field such as Information Systems, Computer Science, or Cybersecurity, or equivalent practical experience.
Have at least 7 years of experience in GRC, Information Security, or IT Audit.
Bring experience with US public-sector compliance frameworks, particularly FedRAMP, DoD SRG, and CJIS.
Have experience leading technical audits or complex compliance programs, ideally managing federal assessments through ATO.
Understand NIST SP 800-53 and NIST SP 800-171 controls and their implementation in cloud-native environments.
Have knowledge of cloud security architecture, risk management, and security controls across AWS, Google Cloud, or Microsoft Azure.
Have practical experience with control mapping, gap analysis, remediation oversight, and compliance maturity assessments.
Have advanced proficiency with Jira and Confluence, or comparable tools, for audit findings, control performance, documentation, and remediation workflows.
Communicate complex security configurations to auditors, government stakeholders, and technical teams.
Preferred certifications include CISA, CRISC, CISSP, or ISO Lead Implementer.

Lead external audits and certifications from scoping and planning through evidence collection, findings management, and final outcomes.
Coordinate federal assessments with 3PAOs, agency sponsors, and the FedRAMP Program Management Office.
Manage continuous monitoring, vulnerability analysis and reporting, remediation tracking, and the POA&M.
Lead annual updates and technical reviews of the SSP, ISCP, and IRP.
Translate NIST and other regulatory requirements into technical controls for Engineering and Operations teams.
Advise on cloud security configurations, including FIPS 140-2, boundary protection, and access controls.
Map regulatory requirements to the control framework and conduct gap analyses for new frameworks and jurisdictions.
Own internal audit schedules and remediation workflows, including milestones and resolution timelines.
Communicate compliance risks, gaps, trends, and program progress to business and technical leadership.
Build and maintain executive dashboards and Jira workflows for control performance, audit findings, and remediation progress.

View Full Description & ApplyYou'll be redirected to the employer's site